feat(admin): Add user management and upgrade to module permission system
Features - User Management (Phase 4.1): - Database: Add user_modules table for fine-grained module permissions - Database: Add 4 user permissions (view/create/edit/delete) to role_permissions - Backend: UserService (780 lines) - CRUD with tenant isolation - Backend: UserController + UserRoutes (648 lines) - 13 API endpoints - Backend: Batch import users from Excel - Frontend: UserListPage (412 lines) - list/filter/search/pagination - Frontend: UserFormPage (341 lines) - create/edit with module config - Frontend: UserDetailPage (393 lines) - details/tenant/module management - Frontend: 3 modal components (592 lines) - import/assign/configure - API: GET/POST/PUT/DELETE /api/admin/users/* endpoints Architecture Upgrade - Module Permission System: - Backend: Add getUserModules() method in auth.service - Backend: Login API returns modules array in user object - Frontend: AuthContext adds hasModule() method - Frontend: Navigation filters modules based on user.modules - Frontend: RouteGuard checks requiredModule instead of requiredVersion - Frontend: Remove deprecated version-based permission system - UX: Only show accessible modules in navigation (clean UI) - UX: Smart redirect after login (avoid 403 for regular users) Fixes: - Fix UTF-8 encoding corruption in ~100 docs files - Fix pageSize type conversion in userService (String to Number) - Fix authUser undefined error in TopNavigation - Fix login redirect logic with role-based access check - Update Git commit guidelines v1.2 with UTF-8 safety rules Database Changes: - CREATE TABLE user_modules (user_id, tenant_id, module_code, is_enabled) - ADD UNIQUE CONSTRAINT (user_id, tenant_id, module_code) - INSERT 4 permissions + role assignments - UPDATE PUBLIC tenant with 8 module subscriptions Technical: - Backend: 5 new files (~2400 lines) - Frontend: 10 new files (~2500 lines) - Docs: 1 development record + 2 status updates + 1 guideline update - Total: ~4900 lines of code Status: User management 100% complete, module permission system operational
This commit is contained in:
@@ -1,17 +1,17 @@
|
||||
# 鐢ㄦ埛涓庢潈闄愪腑蹇?(UAM)
|
||||
# 用户与权限中心 (UAM)
|
||||
|
||||
> **妯″潡瀹氫綅锛?* 骞冲彴鍩虹<E98DA9>灞傛牳蹇冩ā鍧?
|
||||
> **模块定位:** 平台基础层核心模块
|
||||
> **优先级:** P0(最高)
|
||||
> **鐘舵€侊細** 鈴?璁捐<E79281>涓?
|
||||
> **状态:** ⏳ 设计中
|
||||
|
||||
---
|
||||
|
||||
## 📋 模块概述
|
||||
|
||||
用户与权限中心(User Access Management)是平台的核心基础模块,负责:
|
||||
- 鐢ㄦ埛娉ㄥ唽銆佺櫥褰曘€佽<EFBFBD>璇?
|
||||
- 瑙掕壊涓庢潈闄愮<EFBFBD>鐞嗭紙RBAC锛?
|
||||
- Feature Flag 鍔熻兘寮€鍏筹紙鍟嗕笟妯″紡鍩虹<EFBFBD>锛?
|
||||
- 用户注册、登录、认证
|
||||
- 角色与权限管理(RBAC)
|
||||
- Feature Flag 功能开关(商业模式基础)
|
||||
- 多租户管理(SaaS版)
|
||||
|
||||
---
|
||||
@@ -21,21 +21,21 @@
|
||||
### 1. 用户认证
|
||||
- JWT Token认证
|
||||
- 用户注册/登录
|
||||
- 瀵嗙爜鍔犲瘑锛坆crypt锛?
|
||||
- 密码加密(bcrypt)
|
||||
- 会话管理
|
||||
|
||||
### 2. 瑙掕壊鏉冮檺绠$悊锛圧BAC锛?
|
||||
### 2. 角色权限管理(RBAC)
|
||||
- 角色定义
|
||||
- 权限定义
|
||||
- 用户-角色关联
|
||||
- 角色-权限关联
|
||||
|
||||
### 3. Feature Flag 绠$悊 猸?**鍟嗕笟妯″紡鏍稿績**
|
||||
- 鐗堟湰鍔熻兘鎺у埗锛堜笓涓氱増銆侀珮绾х増銆佹棗鑸扮増锛?
|
||||
- 妯″潡寮€鍏?
|
||||
- 鍔熻兘寮€鍏?
|
||||
### 3. Feature Flag 管理 ⭐ **商业模式核心**
|
||||
- 版本功能控制(专业版、高级版、旗舰版)
|
||||
- 模块开关
|
||||
- 功能开关
|
||||
|
||||
### 4. 澶氱<EFBFBD>鎴风<EFBFBD>鐞?
|
||||
### 4. 多租户管理
|
||||
- 租户隔离
|
||||
- 租户配额
|
||||
|
||||
@@ -44,17 +44,17 @@
|
||||
## 📂 文档结构
|
||||
|
||||
```
|
||||
01-鐢ㄦ埛涓庢潈闄愪腑蹇?UAM)/
|
||||
鈹溾攢鈹€ [AI瀵规帴] UAM蹇<EFBFBD>€熶笂涓嬫枃.md # 鈴?寰呭垱寤?
|
||||
鈹溾攢鈹€ 00-闇€姹傚垎鏋?
|
||||
鈹? 鈹斺攢鈹€ README.md
|
||||
01-用户与权限中心(UAM)/
|
||||
├── [AI对接] UAM快速上下文.md # ⏳ 待创建
|
||||
├── 00-需求分析/
|
||||
│ └── README.md
|
||||
├── 01-设计文档/
|
||||
鈹? 鈹溾攢鈹€ 01-鏋舵瀯璁捐<E79281>.md # 鈴?寰呭垱寤?
|
||||
鈹? 鈹溾攢鈹€ 02-鏁版嵁搴撹<E690B4>璁?md # 鈴?寰呭垱寤?
|
||||
鈹? 鈹溾攢鈹€ 03-API璁捐<EFBFBD>.md # 鈴?寰呭垱寤?
|
||||
鈹? 鈹溾攢鈹€ 04-Feature-Flag璁捐<EFBFBD>.md # 鈴?寰呭垱寤?
|
||||
鈹? 鈹斺攢鈹€ README.md
|
||||
鈹斺攢鈹€ README.md # 鉁?褰撳墠鏂囨。
|
||||
│ ├── 01-架构设计.md # ⏳ 待创建
|
||||
│ ├── 02-数据库设计.md # ⏳ 待创建
|
||||
│ ├── 03-API设计.md # ⏳ 待创建
|
||||
│ ├── 04-Feature-Flag设计.md # ⏳ 待创建
|
||||
│ └── README.md
|
||||
└── README.md # ✅ 当前文档
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
Reference in New Issue
Block a user